@abtnode/util 1.16.49 → 1.16.50-beta-20250902-043619-201bcaed

package/lib/security.js

@@ -8,6 +8,8 @@ const resolve = require('resolve/sync');
 const { tmpdir, homedir } = require('os');
 const which = require('which');
 const { withHttps, withHttp } = require('ufo');
+const { exec } = require('child_process');
+const { promisify } = require('util');
 
 const cloneDeep = require('./deep-clone');
 
@@ -71,14 +73,48 @@ function findExecutable(executable) {
   }
 }
 
+// 缓存 Node.js 版本对应的权限选项
+const permissionOptionCache = new Map();
+
+async function getPermissionOption() {
+  // @note: 前端加载了整个文件，所以 execAsync 必须在这里创建
+  const execAsync = promisify(exec);
+  const nodeVersion = process.version;
+
+  // 检查缓存
+  if (permissionOptionCache.has(nodeVersion)) {
+    return permissionOptionCache.get(nodeVersion);
+  }
+
+  try {
+    const { stdout } = await execAsync('node -h');
+
+    let permissionOption;
+    if (stdout.includes('--permission')) {
+      permissionOption = '--permission';
+    } else if (stdout.includes('--experimental-permission')) {
+      permissionOption = '--experimental-permission';
+    } else {
+      throw new Error(`Can not get permission options for this Node.js version: ${nodeVersion}`);
+    }
+
+    // 缓存结果
+    permissionOptionCache.set(nodeVersion, permissionOption);
+    return permissionOption;
+  } catch (error) {
+    console.error(error);
+    throw error;
+  }
+}
+
 /**
  * @description
  * @see https://github.com/nodejs/node/issues/53621#issuecomment-2196879752
- * @param {import('@blocklet/server-js').BlockletState & { environmentObj: [key: string]: string } } blocklet
+ * @param {import('@blocklet/server-js').BlockletState & { environmentObj: { [key: string]: string } }} blocklet
  * @param {true | false} enableFileSystemIsolation
- * @return {string}
+ * @return {Promise<string>}
  */
-const getSecurityNodeOptions = (blocklet, enableFileSystemIsolation = true) => {
+const getSecurityNodeOptions = async (blocklet, enableFileSystemIsolation = true) => {
   const nodeOptions = process.env.NODE_OPTIONS ?? '';
 
   if (
@@ -128,8 +164,10 @@ const getSecurityNodeOptions = (blocklet, enableFileSystemIsolation = true) => {
     process.env.PNPM_HOME ? join(process.env.PNPM_HOME, 'global/') : '',
   ];
 
+  const permissionOption = await getPermissionOption();
+
   options.push(
-    '--permission',
+    permissionOption,
     ...[
       blocklet.environmentObj.BLOCKLET_DATA_DIR, // allow each component to write it's own data
       blocklet.environmentObj.BLOCKLET_APP_DIR, // allow each component to write it's own source code: for example, to install dependencies

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.49",
+  "version": "1.16.50-beta-20250902-043619-201bcaed",
   "description": "ArcBlock's JavaScript utility",
   "main": "lib/index.js",
   "files": [
@@ -18,14 +18,14 @@
   "author": "polunzh <polunzh@gmail.com> (http://github.com/polunzh)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/constant": "1.16.49",
-    "@abtnode/db-cache": "1.16.49",
+    "@abtnode/constant": "1.16.50-beta-20250902-043619-201bcaed",
+    "@abtnode/db-cache": "1.16.50-beta-20250902-043619-201bcaed",
     "@arcblock/did": "1.24.0",
     "@arcblock/event-hub": "1.24.0",
     "@arcblock/pm2": "^6.0.12",
-    "@blocklet/constant": "1.16.49",
+    "@blocklet/constant": "1.16.50-beta-20250902-043619-201bcaed",
     "@blocklet/error": "^0.2.5",
-    "@blocklet/meta": "1.16.49",
+    "@blocklet/meta": "1.16.50-beta-20250902-043619-201bcaed",
     "@blocklet/xss": "^0.2.5",
     "@ocap/client": "1.24.0",
     "@ocap/mcrypto": "1.24.0",
@@ -91,5 +91,5 @@
     "fs-extra": "^11.2.0",
     "jest": "^29.7.0"
   },
-  "gitHead": "58c3ce97ab6586c52c5cee838a072d49ccb59b4b"
+  "gitHead": "303555dda4a22370d579651b10886d05688c5533"
 }